Hardware Podcasts

Shouting at chips with Colin O'Flynn

The Amp Hour · 2 Aug 2021 · 1h 04m · Episode 552

What this episode covers

Colin O'Flynn of NewAE Technology discusses his transition from academia to running a hardware security company, detailing his products like the Chip Whisperer and the new Chip Shouter. He explains side channel analysis and fault injection techniques, noting how consumer devices are slowly adopting countermeasures against these attacks. O'Flynn also addresses the severe supply chain challenges facing small hardware firms, specifically the cash flow strain caused by pre-buying expensive FPGAs during shortages, and announces his upcoming book, The Hardware Hacking Handbook.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
NewAE Technology, Schlage, JLCPCB, Xilinx, DigiKey, Crowd Supply
Products
Chip Whisperer, Chip Shouter, Chip Whisperer Husky, AirTag, Starlink
Chips
nRF52832
Also
The Hardware Hacking Handbook

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 00m

    286: Twenty Cans of Gas (Repeat)

    Colin O'Flynn, CTO of NewAE Technology and an assistant professor, discusses his company's ChipWhisperer platform, which enables side-channel power analysis and fault injection attacks on embedded devices. He explains how differential power analysis recovers encryption keys by correlating power consumption with data bus activity, noting that while the technique is decades old, many IoT devices remain vulnerable. O'Flynn also covers FPGA design for precise timing, software countermeasures like masking, and the ethical implications of making security research tools accessible to both defenders and attackers.

    Security & privacyMicrocontrollers & dev platforms
    7 chapters

  • Embedded.fm · 1h 00m

    286: Twenty Cans of Gas

    Colin O'Flynn, CTO of NewAE Technology and an assistant professor at Dalhousie University, explains how his ChipWhisperer platform enables side-channel power analysis and fault injection attacks to recover encryption keys from embedded devices. He details the mechanics of differential power analysis, noting that power consumption correlates with data bus activity, allowing attackers to iteratively recover secret keys from algorithms like AES. O'Flynn discusses the ethical implications of open-source security tools, arguing that making these attacks accessible helps designers implement better countermeasures like masking and key rotation before products reach the market. He also covers his work with FPGAs for precise timing control in attacks and his hiring needs for embedded security experts at his company.

    Security & privacyEmbedded firmware
    7 chapters

  • Moore's Lobby · 1h 01m

    Ep. 28 | How DARPA Stops IC Hardware Hackers in Their Tracks: Insights from Serge Leef

    Serge Leef, DARPA’s Program Manager for the Microsystems Technology Office, discusses his transition from a 30-year career in design automation at companies like Mentor Graphics and Silicon Graphics to leading hardware security initiatives at DARPA. He outlines DARPA’s four attack surfaces for secure silicon—supply chain, side-channel, reverse engineering, and hardware Trojans—and explains the agency's strategy of embedding security into design tools, likening it to fluoridating water. Leef highlights the economic realities of hardware security, noting that while merchant semiconductor companies invest heavily in bespoke protection, IoT manufacturers often ignore it until forced by crisis, and emphasizes the critical vulnerability of untrusted third-party IP.

    Security & privacyEDA & CAD tools
    8 chapters

  • Embedded.fm · 1h 08m

    100: Unintentional Radiator

    Hosts Amelia Cook and Christopher White reunite with guests Star Simpson and Jen Costillo to reflect on the evolution of the hardware hobbyist landscape over the two years since their first appearance. Star Simpson, who works at Orion, discusses her wearable device project and her open-source FPGA toolchain initiative called Balboa, while also recounting the challenges of crowdfunding the Octopart reference card. The group analyzes the shifting attitudes toward privacy and security in the Internet of Things, the rise of accessible prototyping tools like 3D printing and Crowd Supply, and the changing ecosystem of development boards including the Odroid and Arduino.

    Crowdfunding & preordersChips, FPGAs & semiconductors
    10 chapters

  • Embedded.fm · 1h 05m

    431: Becoming More of a Smurf

    Jasper van Woudenberg, CTO of Riscure North America and co-author of the Hardware Hacking Handbook with Colin O'Flynn, discusses the seven-year process of writing the book and the evolving landscape of hardware security. He explains how vulnerabilities like Spectre and Meltdown emerged during the writing process, forcing multiple rewrites, and details the shift from red-team hacking to blue-team defense, or 'becoming a Smurf.' The conversation covers specific attack vectors including side-channel analysis, fault injection, and remote exploitation via ADCs, as well as the ethical implications of publishing hardware vulnerabilities.

    Security & privacyChips, FPGAs & semiconductors
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.